1/*
2 * This program is free software; you can redistribute it and/or modify
3 * it under the terms of the GNU General Public License as published by
4 * the Free Software Foundation; either version 2 of the License, or
5 * (at your option) any later version.
6 *
7 * Copyright Jonathan Naylor G4KLX (g4klx@g4klx.demon.co.uk)
8 * Copyright Alan Cox GW4PTS (alan@lxorguk.ukuu.org.uk)
9 * Copyright Darryl Miles G7LED (dlm@g7led.demon.co.uk)
10 */
11#include <linux/module.h>
12#include <linux/moduleparam.h>
13#include <linux/capability.h>
14#include <linux/errno.h>
15#include <linux/types.h>
16#include <linux/socket.h>
17#include <linux/in.h>
18#include <linux/slab.h>
19#include <linux/kernel.h>
20#include <linux/sched.h>
21#include <linux/timer.h>
22#include <linux/string.h>
23#include <linux/sockios.h>
24#include <linux/net.h>
25#include <linux/stat.h>
26#include <net/ax25.h>
27#include <linux/inet.h>
28#include <linux/netdevice.h>
29#include <linux/if_arp.h>
30#include <linux/skbuff.h>
31#include <net/net_namespace.h>
32#include <net/sock.h>
33#include <asm/uaccess.h>
34#include <asm/system.h>
35#include <linux/fcntl.h>
36#include <linux/termios.h>	/* For TIOCINQ/OUTQ */
37#include <linux/mm.h>
38#include <linux/interrupt.h>
39#include <linux/notifier.h>
40#include <net/netrom.h>
41#include <linux/proc_fs.h>
42#include <linux/seq_file.h>
43#include <net/ip.h>
44#include <net/tcp_states.h>
45#include <net/arp.h>
46#include <linux/init.h>
47
48static int nr_ndevs = 4;
49
50int sysctl_netrom_default_path_quality            = NR_DEFAULT_QUAL;
51int sysctl_netrom_obsolescence_count_initialiser  = NR_DEFAULT_OBS;
52int sysctl_netrom_network_ttl_initialiser         = NR_DEFAULT_TTL;
53int sysctl_netrom_transport_timeout               = NR_DEFAULT_T1;
54int sysctl_netrom_transport_maximum_tries         = NR_DEFAULT_N2;
55int sysctl_netrom_transport_acknowledge_delay     = NR_DEFAULT_T2;
56int sysctl_netrom_transport_busy_delay            = NR_DEFAULT_T4;
57int sysctl_netrom_transport_requested_window_size = NR_DEFAULT_WINDOW;
58int sysctl_netrom_transport_no_activity_timeout   = NR_DEFAULT_IDLE;
59int sysctl_netrom_routing_control                 = NR_DEFAULT_ROUTING;
60int sysctl_netrom_link_fails_count                = NR_DEFAULT_FAILS;
61int sysctl_netrom_reset_circuit                   = NR_DEFAULT_RESET;
62
63static unsigned short circuit = 0x101;
64
65static HLIST_HEAD(nr_list);
66static DEFINE_SPINLOCK(nr_list_lock);
67
68static const struct proto_ops nr_proto_ops;
69
70/*
71 * NETROM network devices are virtual network devices encapsulating NETROM
72 * frames into AX.25 which will be sent through an AX.25 device, so form a
73 * special "super class" of normal net devices; split their locks off into a
74 * separate class since they always nest.
75 */
76static struct lock_class_key nr_netdev_xmit_lock_key;
77static struct lock_class_key nr_netdev_addr_lock_key;
78
79static void nr_set_lockdep_one(struct net_device *dev,
80			       struct netdev_queue *txq,
81			       void *_unused)
82{
83	lockdep_set_class(&txq->_xmit_lock, &nr_netdev_xmit_lock_key);
84}
85
86static void nr_set_lockdep_key(struct net_device *dev)
87{
88	lockdep_set_class(&dev->addr_list_lock, &nr_netdev_addr_lock_key);
89	netdev_for_each_tx_queue(dev, nr_set_lockdep_one, NULL);
90}
91
92/*
93 *	Socket removal during an interrupt is now safe.
94 */
95static void nr_remove_socket(struct sock *sk)
96{
97	spin_lock_bh(&nr_list_lock);
98	sk_del_node_init(sk);
99	spin_unlock_bh(&nr_list_lock);
100}
101
102/*
103 *	Kill all bound sockets on a dropped device.
104 */
105static void nr_kill_by_device(struct net_device *dev)
106{
107	struct sock *s;
108	struct hlist_node *node;
109
110	spin_lock_bh(&nr_list_lock);
111	sk_for_each(s, node, &nr_list)
112		if (nr_sk(s)->device == dev)
113			nr_disconnect(s, ENETUNREACH);
114	spin_unlock_bh(&nr_list_lock);
115}
116
117/*
118 *	Handle device status changes.
119 */
120static int nr_device_event(struct notifier_block *this, unsigned long event, void *ptr)
121{
122	struct net_device *dev = (struct net_device *)ptr;
123
124	if (!net_eq(dev_net(dev), &init_net))
125		return NOTIFY_DONE;
126
127	if (event != NETDEV_DOWN)
128		return NOTIFY_DONE;
129
130	nr_kill_by_device(dev);
131	nr_rt_device_down(dev);
132
133	return NOTIFY_DONE;
134}
135
136/*
137 *	Add a socket to the bound sockets list.
138 */
139static void nr_insert_socket(struct sock *sk)
140{
141	spin_lock_bh(&nr_list_lock);
142	sk_add_node(sk, &nr_list);
143	spin_unlock_bh(&nr_list_lock);
144}
145
146/*
147 *	Find a socket that wants to accept the Connect Request we just
148 *	received.
149 */
150static struct sock *nr_find_listener(ax25_address *addr)
151{
152	struct sock *s;
153	struct hlist_node *node;
154
155	spin_lock_bh(&nr_list_lock);
156	sk_for_each(s, node, &nr_list)
157		if (!ax25cmp(&nr_sk(s)->source_addr, addr) &&
158		    s->sk_state == TCP_LISTEN) {
159			bh_lock_sock(s);
160			goto found;
161		}
162	s = NULL;
163found:
164	spin_unlock_bh(&nr_list_lock);
165	return s;
166}
167
168/*
169 *	Find a connected NET/ROM socket given my circuit IDs.
170 */
171static struct sock *nr_find_socket(unsigned char index, unsigned char id)
172{
173	struct sock *s;
174	struct hlist_node *node;
175
176	spin_lock_bh(&nr_list_lock);
177	sk_for_each(s, node, &nr_list) {
178		struct nr_sock *nr = nr_sk(s);
179
180		if (nr->my_index == index && nr->my_id == id) {
181			bh_lock_sock(s);
182			goto found;
183		}
184	}
185	s = NULL;
186found:
187	spin_unlock_bh(&nr_list_lock);
188	return s;
189}
190
191/*
192 *	Find a connected NET/ROM socket given their circuit IDs.
193 */
194static struct sock *nr_find_peer(unsigned char index, unsigned char id,
195	ax25_address *dest)
196{
197	struct sock *s;
198	struct hlist_node *node;
199
200	spin_lock_bh(&nr_list_lock);
201	sk_for_each(s, node, &nr_list) {
202		struct nr_sock *nr = nr_sk(s);
203
204		if (nr->your_index == index && nr->your_id == id &&
205		    !ax25cmp(&nr->dest_addr, dest)) {
206			bh_lock_sock(s);
207			goto found;
208		}
209	}
210	s = NULL;
211found:
212	spin_unlock_bh(&nr_list_lock);
213	return s;
214}
215
216/*
217 *	Find next free circuit ID.
218 */
219static unsigned short nr_find_next_circuit(void)
220{
221	unsigned short id = circuit;
222	unsigned char i, j;
223	struct sock *sk;
224
225	for (;;) {
226		i = id / 256;
227		j = id % 256;
228
229		if (i != 0 && j != 0) {
230			if ((sk=nr_find_socket(i, j)) == NULL)
231				break;
232			bh_unlock_sock(sk);
233		}
234
235		id++;
236	}
237
238	return id;
239}
240
241/*
242 *	Deferred destroy.
243 */
244void nr_destroy_socket(struct sock *);
245
246/*
247 *	Handler for deferred kills.
248 */
249static void nr_destroy_timer(unsigned long data)
250{
251	struct sock *sk=(struct sock *)data;
252	bh_lock_sock(sk);
253	sock_hold(sk);
254	nr_destroy_socket(sk);
255	bh_unlock_sock(sk);
256	sock_put(sk);
257}
258
259/*
260 *	This is called from user mode and the timers. Thus it protects itself
261 *	against interrupt users but doesn't worry about being called during
262 *	work. Once it is removed from the queue no interrupt or bottom half
263 *	will touch it and we are (fairly 8-) ) safe.
264 */
265void nr_destroy_socket(struct sock *sk)
266{
267	struct sk_buff *skb;
268
269	nr_remove_socket(sk);
270
271	nr_stop_heartbeat(sk);
272	nr_stop_t1timer(sk);
273	nr_stop_t2timer(sk);
274	nr_stop_t4timer(sk);
275	nr_stop_idletimer(sk);
276
277	nr_clear_queues(sk);		/* Flush the queues */
278
279	while ((skb = skb_dequeue(&sk->sk_receive_queue)) != NULL) {
280		if (skb->sk != sk) { /* A pending connection */
281			/* Queue the unaccepted socket for death */
282			sock_set_flag(skb->sk, SOCK_DEAD);
283			nr_start_heartbeat(skb->sk);
284			nr_sk(skb->sk)->state = NR_STATE_0;
285		}
286
287		kfree_skb(skb);
288	}
289
290	if (sk_has_allocations(sk)) {
291		/* Defer: outstanding buffers */
292		sk->sk_timer.function = nr_destroy_timer;
293		sk->sk_timer.expires  = jiffies + 2 * HZ;
294		add_timer(&sk->sk_timer);
295	} else
296		sock_put(sk);
297}
298
299/*
300 *	Handling for system calls applied via the various interfaces to a
301 *	NET/ROM socket object.
302 */
303
304static int nr_setsockopt(struct socket *sock, int level, int optname,
305	char __user *optval, unsigned int optlen)
306{
307	struct sock *sk = sock->sk;
308	struct nr_sock *nr = nr_sk(sk);
309	int opt;
310
311	if (level != SOL_NETROM)
312		return -ENOPROTOOPT;
313
314	if (optlen < sizeof(int))
315		return -EINVAL;
316
317	if (get_user(opt, (int __user *)optval))
318		return -EFAULT;
319
320	switch (optname) {
321	case NETROM_T1:
322		if (opt < 1)
323			return -EINVAL;
324		nr->t1 = opt * HZ;
325		return 0;
326
327	case NETROM_T2:
328		if (opt < 1)
329			return -EINVAL;
330		nr->t2 = opt * HZ;
331		return 0;
332
333	case NETROM_N2:
334		if (opt < 1 || opt > 31)
335			return -EINVAL;
336		nr->n2 = opt;
337		return 0;
338
339	case NETROM_T4:
340		if (opt < 1)
341			return -EINVAL;
342		nr->t4 = opt * HZ;
343		return 0;
344
345	case NETROM_IDLE:
346		if (opt < 0)
347			return -EINVAL;
348		nr->idle = opt * 60 * HZ;
349		return 0;
350
351	default:
352		return -ENOPROTOOPT;
353	}
354}
355
356static int nr_getsockopt(struct socket *sock, int level, int optname,
357	char __user *optval, int __user *optlen)
358{
359	struct sock *sk = sock->sk;
360	struct nr_sock *nr = nr_sk(sk);
361	int val = 0;
362	int len;
363
364	if (level != SOL_NETROM)
365		return -ENOPROTOOPT;
366
367	if (get_user(len, optlen))
368		return -EFAULT;
369
370	if (len < 0)
371		return -EINVAL;
372
373	switch (optname) {
374	case NETROM_T1:
375		val = nr->t1 / HZ;
376		break;
377
378	case NETROM_T2:
379		val = nr->t2 / HZ;
380		break;
381
382	case NETROM_N2:
383		val = nr->n2;
384		break;
385
386	case NETROM_T4:
387		val = nr->t4 / HZ;
388		break;
389
390	case NETROM_IDLE:
391		val = nr->idle / (60 * HZ);
392		break;
393
394	default:
395		return -ENOPROTOOPT;
396	}
397
398	len = min_t(unsigned int, len, sizeof(int));
399
400	if (put_user(len, optlen))
401		return -EFAULT;
402
403	return copy_to_user(optval, &val, len) ? -EFAULT : 0;
404}
405
406static int nr_listen(struct socket *sock, int backlog)
407{
408	struct sock *sk = sock->sk;
409
410	lock_sock(sk);
411	if (sk->sk_state != TCP_LISTEN) {
412		memset(&nr_sk(sk)->user_addr, 0, AX25_ADDR_LEN);
413		sk->sk_max_ack_backlog = backlog;
414		sk->sk_state           = TCP_LISTEN;
415		release_sock(sk);
416		return 0;
417	}
418	release_sock(sk);
419
420	return -EOPNOTSUPP;
421}
422
423static struct proto nr_proto = {
424	.name	  = "NETROM",
425	.owner	  = THIS_MODULE,
426	.obj_size = sizeof(struct nr_sock),
427};
428
429static int nr_create(struct net *net, struct socket *sock, int protocol,
430		     int kern)
431{
432	struct sock *sk;
433	struct nr_sock *nr;
434
435	if (!net_eq(net, &init_net))
436		return -EAFNOSUPPORT;
437
438	if (sock->type != SOCK_SEQPACKET || protocol != 0)
439		return -ESOCKTNOSUPPORT;
440
441	sk = sk_alloc(net, PF_NETROM, GFP_ATOMIC, &nr_proto);
442	if (sk  == NULL)
443		return -ENOMEM;
444
445	nr = nr_sk(sk);
446
447	sock_init_data(sock, sk);
448
449	sock->ops    = &nr_proto_ops;
450	sk->sk_protocol = protocol;
451
452	skb_queue_head_init(&nr->ack_queue);
453	skb_queue_head_init(&nr->reseq_queue);
454	skb_queue_head_init(&nr->frag_queue);
455
456	nr_init_timers(sk);
457
458	nr->t1     =
459		msecs_to_jiffies(sysctl_netrom_transport_timeout);
460	nr->t2     =
461		msecs_to_jiffies(sysctl_netrom_transport_acknowledge_delay);
462	nr->n2     =
463		msecs_to_jiffies(sysctl_netrom_transport_maximum_tries);
464	nr->t4     =
465		msecs_to_jiffies(sysctl_netrom_transport_busy_delay);
466	nr->idle   =
467		msecs_to_jiffies(sysctl_netrom_transport_no_activity_timeout);
468	nr->window = sysctl_netrom_transport_requested_window_size;
469
470	nr->bpqext = 1;
471	nr->state  = NR_STATE_0;
472
473	return 0;
474}
475
476static struct sock *nr_make_new(struct sock *osk)
477{
478	struct sock *sk;
479	struct nr_sock *nr, *onr;
480
481	if (osk->sk_type != SOCK_SEQPACKET)
482		return NULL;
483
484	sk = sk_alloc(sock_net(osk), PF_NETROM, GFP_ATOMIC, osk->sk_prot);
485	if (sk == NULL)
486		return NULL;
487
488	nr = nr_sk(sk);
489
490	sock_init_data(NULL, sk);
491
492	sk->sk_type     = osk->sk_type;
493	sk->sk_priority = osk->sk_priority;
494	sk->sk_protocol = osk->sk_protocol;
495	sk->sk_rcvbuf   = osk->sk_rcvbuf;
496	sk->sk_sndbuf   = osk->sk_sndbuf;
497	sk->sk_state    = TCP_ESTABLISHED;
498	sock_copy_flags(sk, osk);
499
500	skb_queue_head_init(&nr->ack_queue);
501	skb_queue_head_init(&nr->reseq_queue);
502	skb_queue_head_init(&nr->frag_queue);
503
504	nr_init_timers(sk);
505
506	onr = nr_sk(osk);
507
508	nr->t1      = onr->t1;
509	nr->t2      = onr->t2;
510	nr->n2      = onr->n2;
511	nr->t4      = onr->t4;
512	nr->idle    = onr->idle;
513	nr->window  = onr->window;
514
515	nr->device  = onr->device;
516	nr->bpqext  = onr->bpqext;
517
518	return sk;
519}
520
521static int nr_release(struct socket *sock)
522{
523	struct sock *sk = sock->sk;
524	struct nr_sock *nr;
525
526	if (sk == NULL) return 0;
527
528	sock_hold(sk);
529	sock_orphan(sk);
530	lock_sock(sk);
531	nr = nr_sk(sk);
532
533	switch (nr->state) {
534	case NR_STATE_0:
535	case NR_STATE_1:
536	case NR_STATE_2:
537		nr_disconnect(sk, 0);
538		nr_destroy_socket(sk);
539		break;
540
541	case NR_STATE_3:
542		nr_clear_queues(sk);
543		nr->n2count = 0;
544		nr_write_internal(sk, NR_DISCREQ);
545		nr_start_t1timer(sk);
546		nr_stop_t2timer(sk);
547		nr_stop_t4timer(sk);
548		nr_stop_idletimer(sk);
549		nr->state    = NR_STATE_2;
550		sk->sk_state    = TCP_CLOSE;
551		sk->sk_shutdown |= SEND_SHUTDOWN;
552		sk->sk_state_change(sk);
553		sock_set_flag(sk, SOCK_DESTROY);
554		break;
555
556	default:
557		break;
558	}
559
560	sock->sk   = NULL;
561	release_sock(sk);
562	sock_put(sk);
563
564	return 0;
565}
566
567static int nr_bind(struct socket *sock, struct sockaddr *uaddr, int addr_len)
568{
569	struct sock *sk = sock->sk;
570	struct nr_sock *nr = nr_sk(sk);
571	struct full_sockaddr_ax25 *addr = (struct full_sockaddr_ax25 *)uaddr;
572	struct net_device *dev;
573	ax25_uid_assoc *user;
574	ax25_address *source;
575
576	lock_sock(sk);
577	if (!sock_flag(sk, SOCK_ZAPPED)) {
578		release_sock(sk);
579		return -EINVAL;
580	}
581	if (addr_len < sizeof(struct sockaddr_ax25) || addr_len > sizeof(struct full_sockaddr_ax25)) {
582		release_sock(sk);
583		return -EINVAL;
584	}
585	if (addr_len < (addr->fsa_ax25.sax25_ndigis * sizeof(ax25_address) + sizeof(struct sockaddr_ax25))) {
586		release_sock(sk);
587		return -EINVAL;
588	}
589	if (addr->fsa_ax25.sax25_family != AF_NETROM) {
590		release_sock(sk);
591		return -EINVAL;
592	}
593	if ((dev = nr_dev_get(&addr->fsa_ax25.sax25_call)) == NULL) {
594		SOCK_DEBUG(sk, "NET/ROM: bind failed: invalid node callsign\n");
595		release_sock(sk);
596		return -EADDRNOTAVAIL;
597	}
598
599	/*
600	 * Only the super user can set an arbitrary user callsign.
601	 */
602	if (addr->fsa_ax25.sax25_ndigis == 1) {
603		if (!capable(CAP_NET_BIND_SERVICE)) {
604			dev_put(dev);
605			release_sock(sk);
606			return -EACCES;
607		}
608		nr->user_addr   = addr->fsa_digipeater[0];
609		nr->source_addr = addr->fsa_ax25.sax25_call;
610	} else {
611		source = &addr->fsa_ax25.sax25_call;
612
613		user = ax25_findbyuid(current_euid());
614		if (user) {
615			nr->user_addr   = user->call;
616			ax25_uid_put(user);
617		} else {
618			if (ax25_uid_policy && !capable(CAP_NET_BIND_SERVICE)) {
619				release_sock(sk);
620				dev_put(dev);
621				return -EPERM;
622			}
623			nr->user_addr   = *source;
624		}
625
626		nr->source_addr = *source;
627	}
628
629	nr->device = dev;
630	nr_insert_socket(sk);
631
632	sock_reset_flag(sk, SOCK_ZAPPED);
633	dev_put(dev);
634	release_sock(sk);
635	SOCK_DEBUG(sk, "NET/ROM: socket is bound\n");
636	return 0;
637}
638
639static int nr_connect(struct socket *sock, struct sockaddr *uaddr,
640	int addr_len, int flags)
641{
642	struct sock *sk = sock->sk;
643	struct nr_sock *nr = nr_sk(sk);
644	struct sockaddr_ax25 *addr = (struct sockaddr_ax25 *)uaddr;
645	ax25_address *source = NULL;
646	ax25_uid_assoc *user;
647	struct net_device *dev;
648	int err = 0;
649
650	lock_sock(sk);
651	if (sk->sk_state == TCP_ESTABLISHED && sock->state == SS_CONNECTING) {
652		sock->state = SS_CONNECTED;
653		goto out_release;	/* Connect completed during a ERESTARTSYS event */
654	}
655
656	if (sk->sk_state == TCP_CLOSE && sock->state == SS_CONNECTING) {
657		sock->state = SS_UNCONNECTED;
658		err = -ECONNREFUSED;
659		goto out_release;
660	}
661
662	if (sk->sk_state == TCP_ESTABLISHED) {
663		err = -EISCONN;	/* No reconnect on a seqpacket socket */
664		goto out_release;
665	}
666
667	sk->sk_state   = TCP_CLOSE;
668	sock->state = SS_UNCONNECTED;
669
670	if (addr_len != sizeof(struct sockaddr_ax25) && addr_len != sizeof(struct full_sockaddr_ax25)) {
671		err = -EINVAL;
672		goto out_release;
673	}
674	if (addr->sax25_family != AF_NETROM) {
675		err = -EINVAL;
676		goto out_release;
677	}
678	if (sock_flag(sk, SOCK_ZAPPED)) {	/* Must bind first - autobinding in this may or may not work */
679		sock_reset_flag(sk, SOCK_ZAPPED);
680
681		if ((dev = nr_dev_first()) == NULL) {
682			err = -ENETUNREACH;
683			goto out_release;
684		}
685		source = (ax25_address *)dev->dev_addr;
686
687		user = ax25_findbyuid(current_euid());
688		if (user) {
689			nr->user_addr   = user->call;
690			ax25_uid_put(user);
691		} else {
692			if (ax25_uid_policy && !capable(CAP_NET_ADMIN)) {
693				dev_put(dev);
694				err = -EPERM;
695				goto out_release;
696			}
697			nr->user_addr   = *source;
698		}
699
700		nr->source_addr = *source;
701		nr->device      = dev;
702
703		dev_put(dev);
704		nr_insert_socket(sk);		/* Finish the bind */
705	}
706
707	nr->dest_addr = addr->sax25_call;
708
709	release_sock(sk);
710	circuit = nr_find_next_circuit();
711	lock_sock(sk);
712
713	nr->my_index = circuit / 256;
714	nr->my_id    = circuit % 256;
715
716	circuit++;
717
718	/* Move to connecting socket, start sending Connect Requests */
719	sock->state  = SS_CONNECTING;
720	sk->sk_state = TCP_SYN_SENT;
721
722	nr_establish_data_link(sk);
723
724	nr->state = NR_STATE_1;
725
726	nr_start_heartbeat(sk);
727
728	/* Now the loop */
729	if (sk->sk_state != TCP_ESTABLISHED && (flags & O_NONBLOCK)) {
730		err = -EINPROGRESS;
731		goto out_release;
732	}
733
734	/*
735	 * A Connect Ack with Choke or timeout or failed routing will go to
736	 * closed.
737	 */
738	if (sk->sk_state == TCP_SYN_SENT) {
739		DEFINE_WAIT(wait);
740
741		for (;;) {
742			prepare_to_wait(sk_sleep(sk), &wait,
743					TASK_INTERRUPTIBLE);
744			if (sk->sk_state != TCP_SYN_SENT)
745				break;
746			if (!signal_pending(current)) {
747				release_sock(sk);
748				schedule();
749				lock_sock(sk);
750				continue;
751			}
752			err = -ERESTARTSYS;
753			break;
754		}
755		finish_wait(sk_sleep(sk), &wait);
756		if (err)
757			goto out_release;
758	}
759
760	if (sk->sk_state != TCP_ESTABLISHED) {
761		sock->state = SS_UNCONNECTED;
762		err = sock_error(sk);	/* Always set at this point */
763		goto out_release;
764	}
765
766	sock->state = SS_CONNECTED;
767
768out_release:
769	release_sock(sk);
770
771	return err;
772}
773
774static int nr_accept(struct socket *sock, struct socket *newsock, int flags)
775{
776	struct sk_buff *skb;
777	struct sock *newsk;
778	DEFINE_WAIT(wait);
779	struct sock *sk;
780	int err = 0;
781
782	if ((sk = sock->sk) == NULL)
783		return -EINVAL;
784
785	lock_sock(sk);
786	if (sk->sk_type != SOCK_SEQPACKET) {
787		err = -EOPNOTSUPP;
788		goto out_release;
789	}
790
791	if (sk->sk_state != TCP_LISTEN) {
792		err = -EINVAL;
793		goto out_release;
794	}
795
796	/*
797	 *	The write queue this time is holding sockets ready to use
798	 *	hooked into the SABM we saved
799	 */
800	for (;;) {
801		prepare_to_wait(sk_sleep(sk), &wait, TASK_INTERRUPTIBLE);
802		skb = skb_dequeue(&sk->sk_receive_queue);
803		if (skb)
804			break;
805
806		if (flags & O_NONBLOCK) {
807			err = -EWOULDBLOCK;
808			break;
809		}
810		if (!signal_pending(current)) {
811			release_sock(sk);
812			schedule();
813			lock_sock(sk);
814			continue;
815		}
816		err = -ERESTARTSYS;
817		break;
818	}
819	finish_wait(sk_sleep(sk), &wait);
820	if (err)
821		goto out_release;
822
823	newsk = skb->sk;
824	sock_graft(newsk, newsock);
825
826	/* Now attach up the new socket */
827	kfree_skb(skb);
828	sk_acceptq_removed(sk);
829
830out_release:
831	release_sock(sk);
832
833	return err;
834}
835
836static int nr_getname(struct socket *sock, struct sockaddr *uaddr,
837	int *uaddr_len, int peer)
838{
839	struct full_sockaddr_ax25 *sax = (struct full_sockaddr_ax25 *)uaddr;
840	struct sock *sk = sock->sk;
841	struct nr_sock *nr = nr_sk(sk);
842
843	lock_sock(sk);
844	if (peer != 0) {
845		if (sk->sk_state != TCP_ESTABLISHED) {
846			release_sock(sk);
847			return -ENOTCONN;
848		}
849		sax->fsa_ax25.sax25_family = AF_NETROM;
850		sax->fsa_ax25.sax25_ndigis = 1;
851		sax->fsa_ax25.sax25_call   = nr->user_addr;
852		memset(sax->fsa_digipeater, 0, sizeof(sax->fsa_digipeater));
853		sax->fsa_digipeater[0]     = nr->dest_addr;
854		*uaddr_len = sizeof(struct full_sockaddr_ax25);
855	} else {
856		sax->fsa_ax25.sax25_family = AF_NETROM;
857		sax->fsa_ax25.sax25_ndigis = 0;
858		sax->fsa_ax25.sax25_call   = nr->source_addr;
859		*uaddr_len = sizeof(struct sockaddr_ax25);
860	}
861	release_sock(sk);
862
863	return 0;
864}
865
866int nr_rx_frame(struct sk_buff *skb, struct net_device *dev)
867{
868	struct sock *sk;
869	struct sock *make;
870	struct nr_sock *nr_make;
871	ax25_address *src, *dest, *user;
872	unsigned short circuit_index, circuit_id;
873	unsigned short peer_circuit_index, peer_circuit_id;
874	unsigned short frametype, flags, window, timeout;
875	int ret;
876
877	skb->sk = NULL;		/* Initially we don't know who it's for */
878
879	/*
880	 *	skb->data points to the netrom frame start
881	 */
882
883	src  = (ax25_address *)(skb->data + 0);
884	dest = (ax25_address *)(skb->data + 7);
885
886	circuit_index      = skb->data[15];
887	circuit_id         = skb->data[16];
888	peer_circuit_index = skb->data[17];
889	peer_circuit_id    = skb->data[18];
890	frametype          = skb->data[19] & 0x0F;
891	flags              = skb->data[19] & 0xF0;
892
893	/*
894	 * Check for an incoming IP over NET/ROM frame.
895	 */
896	if (frametype == NR_PROTOEXT &&
897	    circuit_index == NR_PROTO_IP && circuit_id == NR_PROTO_IP) {
898		skb_pull(skb, NR_NETWORK_LEN + NR_TRANSPORT_LEN);
899		skb_reset_transport_header(skb);
900
901		return nr_rx_ip(skb, dev);
902	}
903
904	/*
905	 * Find an existing socket connection, based on circuit ID, if it's
906	 * a Connect Request base it on their circuit ID.
907	 *
908	 * Circuit ID 0/0 is not valid but it could still be a "reset" for a
909	 * circuit that no longer exists at the other end ...
910	 */
911
912	sk = NULL;
913
914	if (circuit_index == 0 && circuit_id == 0) {
915		if (frametype == NR_CONNACK && flags == NR_CHOKE_FLAG)
916			sk = nr_find_peer(peer_circuit_index, peer_circuit_id, src);
917	} else {
918		if (frametype == NR_CONNREQ)
919			sk = nr_find_peer(circuit_index, circuit_id, src);
920		else
921			sk = nr_find_socket(circuit_index, circuit_id);
922	}
923
924	if (sk != NULL) {
925		skb_reset_transport_header(skb);
926
927		if (frametype == NR_CONNACK && skb->len == 22)
928			nr_sk(sk)->bpqext = 1;
929		else
930			nr_sk(sk)->bpqext = 0;
931
932		ret = nr_process_rx_frame(sk, skb);
933		bh_unlock_sock(sk);
934		return ret;
935	}
936
937	/*
938	 * Now it should be a CONNREQ.
939	 */
940	if (frametype != NR_CONNREQ) {
941		/*
942		 * Here it would be nice to be able to send a reset but
943		 * NET/ROM doesn't have one.  We've tried to extend the protocol
944		 * by sending NR_CONNACK | NR_CHOKE_FLAGS replies but that
945		 * apparently kills BPQ boxes... :-(
946		 * So now we try to follow the established behaviour of
947		 * G8PZT's Xrouter which is sending packets with command type 7
948		 * as an extension of the protocol.
949		 */
950		if (sysctl_netrom_reset_circuit &&
951		    (frametype != NR_RESET || flags != 0))
952			nr_transmit_reset(skb, 1);
953
954		return 0;
955	}
956
957	sk = nr_find_listener(dest);
958
959	user = (ax25_address *)(skb->data + 21);
960
961	if (sk == NULL || sk_acceptq_is_full(sk) ||
962	    (make = nr_make_new(sk)) == NULL) {
963		nr_transmit_refusal(skb, 0);
964		if (sk)
965			bh_unlock_sock(sk);
966		return 0;
967	}
968
969	window = skb->data[20];
970
971	skb->sk             = make;
972	make->sk_state	    = TCP_ESTABLISHED;
973
974	/* Fill in his circuit details */
975	nr_make = nr_sk(make);
976	nr_make->source_addr = *dest;
977	nr_make->dest_addr   = *src;
978	nr_make->user_addr   = *user;
979
980	nr_make->your_index  = circuit_index;
981	nr_make->your_id     = circuit_id;
982
983	bh_unlock_sock(sk);
984	circuit = nr_find_next_circuit();
985	bh_lock_sock(sk);
986
987	nr_make->my_index    = circuit / 256;
988	nr_make->my_id       = circuit % 256;
989
990	circuit++;
991
992	/* Window negotiation */
993	if (window < nr_make->window)
994		nr_make->window = window;
995
996	/* L4 timeout negotiation */
997	if (skb->len == 37) {
998		timeout = skb->data[36] * 256 + skb->data[35];
999		if (timeout * HZ < nr_make->t1)
1000			nr_make->t1 = timeout * HZ;
1001		nr_make->bpqext = 1;
1002	} else {
1003		nr_make->bpqext = 0;
1004	}
1005
1006	nr_write_internal(make, NR_CONNACK);
1007
1008	nr_make->condition = 0x00;
1009	nr_make->vs        = 0;
1010	nr_make->va        = 0;
1011	nr_make->vr        = 0;
1012	nr_make->vl        = 0;
1013	nr_make->state     = NR_STATE_3;
1014	sk_acceptq_added(sk);
1015	skb_queue_head(&sk->sk_receive_queue, skb);
1016
1017	if (!sock_flag(sk, SOCK_DEAD))
1018		sk->sk_data_ready(sk, skb->len);
1019
1020	bh_unlock_sock(sk);
1021
1022	nr_insert_socket(make);
1023
1024	nr_start_heartbeat(make);
1025	nr_start_idletimer(make);
1026
1027	return 1;
1028}
1029
1030static int nr_sendmsg(struct kiocb *iocb, struct socket *sock,
1031		      struct msghdr *msg, size_t len)
1032{
1033	struct sock *sk = sock->sk;
1034	struct nr_sock *nr = nr_sk(sk);
1035	struct sockaddr_ax25 *usax = (struct sockaddr_ax25 *)msg->msg_name;
1036	int err;
1037	struct sockaddr_ax25 sax;
1038	struct sk_buff *skb;
1039	unsigned char *asmptr;
1040	int size;
1041
1042	if (msg->msg_flags & ~(MSG_DONTWAIT|MSG_EOR|MSG_CMSG_COMPAT))
1043		return -EINVAL;
1044
1045	lock_sock(sk);
1046	if (sock_flag(sk, SOCK_ZAPPED)) {
1047		err = -EADDRNOTAVAIL;
1048		goto out;
1049	}
1050
1051	if (sk->sk_shutdown & SEND_SHUTDOWN) {
1052		send_sig(SIGPIPE, current, 0);
1053		err = -EPIPE;
1054		goto out;
1055	}
1056
1057	if (nr->device == NULL) {
1058		err = -ENETUNREACH;
1059		goto out;
1060	}
1061
1062	if (usax) {
1063		if (msg->msg_namelen < sizeof(sax)) {
1064			err = -EINVAL;
1065			goto out;
1066		}
1067		sax = *usax;
1068		if (ax25cmp(&nr->dest_addr, &sax.sax25_call) != 0) {
1069			err = -EISCONN;
1070			goto out;
1071		}
1072		if (sax.sax25_family != AF_NETROM) {
1073			err = -EINVAL;
1074			goto out;
1075		}
1076	} else {
1077		if (sk->sk_state != TCP_ESTABLISHED) {
1078			err = -ENOTCONN;
1079			goto out;
1080		}
1081		sax.sax25_family = AF_NETROM;
1082		sax.sax25_call   = nr->dest_addr;
1083	}
1084
1085	SOCK_DEBUG(sk, "NET/ROM: sendto: Addresses built.\n");
1086
1087	/* Build a packet - the conventional user limit is 236 bytes. We can
1088	   do ludicrously large NetROM frames but must not overflow */
1089	if (len > 65536) {
1090		err = -EMSGSIZE;
1091		goto out;
1092	}
1093
1094	SOCK_DEBUG(sk, "NET/ROM: sendto: building packet.\n");
1095	size = len + NR_NETWORK_LEN + NR_TRANSPORT_LEN;
1096
1097	if ((skb = sock_alloc_send_skb(sk, size, msg->msg_flags & MSG_DONTWAIT, &err)) == NULL)
1098		goto out;
1099
1100	skb_reserve(skb, size - len);
1101	skb_reset_transport_header(skb);
1102
1103	/*
1104	 *	Push down the NET/ROM header
1105	 */
1106
1107	asmptr = skb_push(skb, NR_TRANSPORT_LEN);
1108	SOCK_DEBUG(sk, "Building NET/ROM Header.\n");
1109
1110	/* Build a NET/ROM Transport header */
1111
1112	*asmptr++ = nr->your_index;
1113	*asmptr++ = nr->your_id;
1114	*asmptr++ = 0;		/* To be filled in later */
1115	*asmptr++ = 0;		/*      Ditto            */
1116	*asmptr++ = NR_INFO;
1117	SOCK_DEBUG(sk, "Built header.\n");
1118
1119	/*
1120	 *	Put the data on the end
1121	 */
1122	skb_put(skb, len);
1123
1124	SOCK_DEBUG(sk, "NET/ROM: Appending user data\n");
1125
1126	/* User data follows immediately after the NET/ROM transport header */
1127	if (memcpy_fromiovec(skb_transport_header(skb), msg->msg_iov, len)) {
1128		kfree_skb(skb);
1129		err = -EFAULT;
1130		goto out;
1131	}
1132
1133	SOCK_DEBUG(sk, "NET/ROM: Transmitting buffer\n");
1134
1135	if (sk->sk_state != TCP_ESTABLISHED) {
1136		kfree_skb(skb);
1137		err = -ENOTCONN;
1138		goto out;
1139	}
1140
1141	nr_output(sk, skb);	/* Shove it onto the queue */
1142
1143	err = len;
1144out:
1145	release_sock(sk);
1146	return err;
1147}
1148
1149static int nr_recvmsg(struct kiocb *iocb, struct socket *sock,
1150		      struct msghdr *msg, size_t size, int flags)
1151{
1152	struct sock *sk = sock->sk;
1153	struct sockaddr_ax25 *sax = (struct sockaddr_ax25 *)msg->msg_name;
1154	size_t copied;
1155	struct sk_buff *skb;
1156	int er;
1157
1158	/*
1159	 * This works for seqpacket too. The receiver has ordered the queue for
1160	 * us! We do one quick check first though
1161	 */
1162
1163	lock_sock(sk);
1164	if (sk->sk_state != TCP_ESTABLISHED) {
1165		release_sock(sk);
1166		return -ENOTCONN;
1167	}
1168
1169	/* Now we can treat all alike */
1170	if ((skb = skb_recv_datagram(sk, flags & ~MSG_DONTWAIT, flags & MSG_DONTWAIT, &er)) == NULL) {
1171		release_sock(sk);
1172		return er;
1173	}
1174
1175	skb_reset_transport_header(skb);
1176	copied     = skb->len;
1177
1178	if (copied > size) {
1179		copied = size;
1180		msg->msg_flags |= MSG_TRUNC;
1181	}
1182
1183	skb_copy_datagram_iovec(skb, 0, msg->msg_iov, copied);
1184
1185	if (sax != NULL) {
1186		sax->sax25_family = AF_NETROM;
1187		skb_copy_from_linear_data_offset(skb, 7, sax->sax25_call.ax25_call,
1188			      AX25_ADDR_LEN);
1189	}
1190
1191	msg->msg_namelen = sizeof(*sax);
1192
1193	skb_free_datagram(sk, skb);
1194
1195	release_sock(sk);
1196	return copied;
1197}
1198
1199
1200static int nr_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
1201{
1202	struct sock *sk = sock->sk;
1203	void __user *argp = (void __user *)arg;
1204	int ret;
1205
1206	switch (cmd) {
1207	case TIOCOUTQ: {
1208		long amount;
1209
1210		lock_sock(sk);
1211		amount = sk->sk_sndbuf - sk_wmem_alloc_get(sk);
1212		if (amount < 0)
1213			amount = 0;
1214		release_sock(sk);
1215		return put_user(amount, (int __user *)argp);
1216	}
1217
1218	case TIOCINQ: {
1219		struct sk_buff *skb;
1220		long amount = 0L;
1221
1222		lock_sock(sk);
1223		/* These two are safe on a single CPU system as only user tasks fiddle here */
1224		if ((skb = skb_peek(&sk->sk_receive_queue)) != NULL)
1225			amount = skb->len;
1226		release_sock(sk);
1227		return put_user(amount, (int __user *)argp);
1228	}
1229
1230	case SIOCGSTAMP:
1231		lock_sock(sk);
1232		ret = sock_get_timestamp(sk, argp);
1233		release_sock(sk);
1234		return ret;
1235
1236	case SIOCGSTAMPNS:
1237		lock_sock(sk);
1238		ret = sock_get_timestampns(sk, argp);
1239		release_sock(sk);
1240		return ret;
1241
1242	case SIOCGIFADDR:
1243	case SIOCSIFADDR:
1244	case SIOCGIFDSTADDR:
1245	case SIOCSIFDSTADDR:
1246	case SIOCGIFBRDADDR:
1247	case SIOCSIFBRDADDR:
1248	case SIOCGIFNETMASK:
1249	case SIOCSIFNETMASK:
1250	case SIOCGIFMETRIC:
1251	case SIOCSIFMETRIC:
1252		return -EINVAL;
1253
1254	case SIOCADDRT:
1255	case SIOCDELRT:
1256	case SIOCNRDECOBS:
1257		if (!capable(CAP_NET_ADMIN)) return -EPERM;
1258		return nr_rt_ioctl(cmd, argp);
1259
1260	default:
1261		return -ENOIOCTLCMD;
1262	}
1263
1264	return 0;
1265}
1266
1267#ifdef CONFIG_PROC_FS
1268
1269static void *nr_info_start(struct seq_file *seq, loff_t *pos)
1270{
1271	spin_lock_bh(&nr_list_lock);
1272	return seq_hlist_start_head(&nr_list, *pos);
1273}
1274
1275static void *nr_info_next(struct seq_file *seq, void *v, loff_t *pos)
1276{
1277	return seq_hlist_next(v, &nr_list, pos);
1278}
1279
1280static void nr_info_stop(struct seq_file *seq, void *v)
1281{
1282	spin_unlock_bh(&nr_list_lock);
1283}
1284
1285static int nr_info_show(struct seq_file *seq, void *v)
1286{
1287	struct sock *s = sk_entry(v);
1288	struct net_device *dev;
1289	struct nr_sock *nr;
1290	const char *devname;
1291	char buf[11];
1292
1293	if (v == SEQ_START_TOKEN)
1294		seq_puts(seq,
1295"user_addr dest_node src_node  dev    my  your  st  vs  vr  va    t1     t2     t4      idle   n2  wnd Snd-Q Rcv-Q inode\n");
1296
1297	else {
1298
1299		bh_lock_sock(s);
1300		nr = nr_sk(s);
1301
1302		if ((dev = nr->device) == NULL)
1303			devname = "???";
1304		else
1305			devname = dev->name;
1306
1307		seq_printf(seq, "%-9s ", ax2asc(buf, &nr->user_addr));
1308		seq_printf(seq, "%-9s ", ax2asc(buf, &nr->dest_addr));
1309		seq_printf(seq,
1310"%-9s %-3s  %02X/%02X %02X/%02X %2d %3d %3d %3d %3lu/%03lu %2lu/%02lu %3lu/%03lu %3lu/%03lu %2d/%02d %3d %5d %5d %ld\n",
1311			ax2asc(buf, &nr->source_addr),
1312			devname,
1313			nr->my_index,
1314			nr->my_id,
1315			nr->your_index,
1316			nr->your_id,
1317			nr->state,
1318			nr->vs,
1319			nr->vr,
1320			nr->va,
1321			ax25_display_timer(&nr->t1timer) / HZ,
1322			nr->t1 / HZ,
1323			ax25_display_timer(&nr->t2timer) / HZ,
1324			nr->t2 / HZ,
1325			ax25_display_timer(&nr->t4timer) / HZ,
1326			nr->t4 / HZ,
1327			ax25_display_timer(&nr->idletimer) / (60 * HZ),
1328			nr->idle / (60 * HZ),
1329			nr->n2count,
1330			nr->n2,
1331			nr->window,
1332			sk_wmem_alloc_get(s),
1333			sk_rmem_alloc_get(s),
1334			s->sk_socket ? SOCK_INODE(s->sk_socket)->i_ino : 0L);
1335
1336		bh_unlock_sock(s);
1337	}
1338	return 0;
1339}
1340
1341static const struct seq_operations nr_info_seqops = {
1342	.start = nr_info_start,
1343	.next = nr_info_next,
1344	.stop = nr_info_stop,
1345	.show = nr_info_show,
1346};
1347
1348static int nr_info_open(struct inode *inode, struct file *file)
1349{
1350	return seq_open(file, &nr_info_seqops);
1351}
1352
1353static const struct file_operations nr_info_fops = {
1354	.owner = THIS_MODULE,
1355	.open = nr_info_open,
1356	.read = seq_read,
1357	.llseek = seq_lseek,
1358	.release = seq_release,
1359};
1360#endif	/* CONFIG_PROC_FS */
1361
1362static const struct net_proto_family nr_family_ops = {
1363	.family		=	PF_NETROM,
1364	.create		=	nr_create,
1365	.owner		=	THIS_MODULE,
1366};
1367
1368static const struct proto_ops nr_proto_ops = {
1369	.family		=	PF_NETROM,
1370	.owner		=	THIS_MODULE,
1371	.release	=	nr_release,
1372	.bind		=	nr_bind,
1373	.connect	=	nr_connect,
1374	.socketpair	=	sock_no_socketpair,
1375	.accept		=	nr_accept,
1376	.getname	=	nr_getname,
1377	.poll		=	datagram_poll,
1378	.ioctl		=	nr_ioctl,
1379	.listen		=	nr_listen,
1380	.shutdown	=	sock_no_shutdown,
1381	.setsockopt	=	nr_setsockopt,
1382	.getsockopt	=	nr_getsockopt,
1383	.sendmsg	=	nr_sendmsg,
1384	.recvmsg	=	nr_recvmsg,
1385	.mmap		=	sock_no_mmap,
1386	.sendpage	=	sock_no_sendpage,
1387};
1388
1389static struct notifier_block nr_dev_notifier = {
1390	.notifier_call	=	nr_device_event,
1391};
1392
1393static struct net_device **dev_nr;
1394
1395static struct ax25_protocol nr_pid = {
1396	.pid	= AX25_P_NETROM,
1397	.func	= nr_route_frame
1398};
1399
1400static struct ax25_linkfail nr_linkfail_notifier = {
1401	.func	= nr_link_failed,
1402};
1403
1404static int __init nr_proto_init(void)
1405{
1406	int i;
1407	int rc = proto_register(&nr_proto, 0);
1408
1409	if (rc != 0)
1410		goto out;
1411
1412	if (nr_ndevs > 0x7fffffff/sizeof(struct net_device *)) {
1413		printk(KERN_ERR "NET/ROM: nr_proto_init - nr_ndevs parameter to large\n");
1414		return -1;
1415	}
1416
1417	dev_nr = kzalloc(nr_ndevs * sizeof(struct net_device *), GFP_KERNEL);
1418	if (dev_nr == NULL) {
1419		printk(KERN_ERR "NET/ROM: nr_proto_init - unable to allocate device array\n");
1420		return -1;
1421	}
1422
1423	for (i = 0; i < nr_ndevs; i++) {
1424		char name[IFNAMSIZ];
1425		struct net_device *dev;
1426
1427		sprintf(name, "nr%d", i);
1428		dev = alloc_netdev(0, name, nr_setup);
1429		if (!dev) {
1430			printk(KERN_ERR "NET/ROM: nr_proto_init - unable to allocate device structure\n");
1431			goto fail;
1432		}
1433
1434		dev->base_addr = i;
1435		if (register_netdev(dev)) {
1436			printk(KERN_ERR "NET/ROM: nr_proto_init - unable to register network device\n");
1437			free_netdev(dev);
1438			goto fail;
1439		}
1440		nr_set_lockdep_key(dev);
1441		dev_nr[i] = dev;
1442	}
1443
1444	if (sock_register(&nr_family_ops)) {
1445		printk(KERN_ERR "NET/ROM: nr_proto_init - unable to register socket family\n");
1446		goto fail;
1447	}
1448
1449	register_netdevice_notifier(&nr_dev_notifier);
1450
1451	ax25_register_pid(&nr_pid);
1452	ax25_linkfail_register(&nr_linkfail_notifier);
1453
1454#ifdef CONFIG_SYSCTL
1455	nr_register_sysctl();
1456#endif
1457
1458	nr_loopback_init();
1459
1460	proc_net_fops_create(&init_net, "nr", S_IRUGO, &nr_info_fops);
1461	proc_net_fops_create(&init_net, "nr_neigh", S_IRUGO, &nr_neigh_fops);
1462	proc_net_fops_create(&init_net, "nr_nodes", S_IRUGO, &nr_nodes_fops);
1463out:
1464	return rc;
1465fail:
1466	while (--i >= 0) {
1467		unregister_netdev(dev_nr[i]);
1468		free_netdev(dev_nr[i]);
1469	}
1470	kfree(dev_nr);
1471	proto_unregister(&nr_proto);
1472	rc = -1;
1473	goto out;
1474}
1475
1476module_init(nr_proto_init);
1477
1478module_param(nr_ndevs, int, 0);
1479MODULE_PARM_DESC(nr_ndevs, "number of NET/ROM devices");
1480
1481MODULE_AUTHOR("Jonathan Naylor G4KLX <g4klx@g4klx.demon.co.uk>");
1482MODULE_DESCRIPTION("The amateur radio NET/ROM network and transport layer protocol");
1483MODULE_LICENSE("GPL");
1484MODULE_ALIAS_NETPROTO(PF_NETROM);
1485
1486static void __exit nr_exit(void)
1487{
1488	int i;
1489
1490	proc_net_remove(&init_net, "nr");
1491	proc_net_remove(&init_net, "nr_neigh");
1492	proc_net_remove(&init_net, "nr_nodes");
1493	nr_loopback_clear();
1494
1495	nr_rt_free();
1496
1497#ifdef CONFIG_SYSCTL
1498	nr_unregister_sysctl();
1499#endif
1500
1501	ax25_linkfail_release(&nr_linkfail_notifier);
1502	ax25_protocol_release(AX25_P_NETROM);
1503
1504	unregister_netdevice_notifier(&nr_dev_notifier);
1505
1506	sock_unregister(PF_NETROM);
1507
1508	for (i = 0; i < nr_ndevs; i++) {
1509		struct net_device *dev = dev_nr[i];
1510		if (dev) {
1511			unregister_netdev(dev);
1512			free_netdev(dev);
1513		}
1514	}
1515
1516	kfree(dev_nr);
1517	proto_unregister(&nr_proto);
1518}
1519module_exit(nr_exit);
1520